Have You Been Monitoring Your System?

advertisement
Fall 2013
Volume XXIII, Issue 1
Administrator of the AICPA Peer Review Program
& New England Peer Review Program
Have You Been Monitoring
Your System?
By Ronda J. Kilanowski, CPA
So you did it, you created your Quality Control Document in
accordance with the Standards of Quality Control System (SQCS
– often pronounced SQUASH), the latest version being No. 8.
You considered the six elements necessary to meet SQCS No. 8.
You have also implemented your system. Wait - let’s review
those required elements again! They are: leadership
responsibilities for quality within the firm (tone at the top);
relevant ethical requirements; acceptance and continuance of
client relationships and specific engagements; human resources;
engagement performance; and monitoring.
1750 Elm Street, Ste 403A
Manchester, NH 03104-2935
(603) 623-3513 / www.nepr.org
In This Issue
Have You Been Monitoring Your System? --------------- 1-3
New Guidance Related to Non-conforming
Engagements ---------------------------------------------------- 3
Auditing Employee Benefit Plans from a Peer
Reviewer’s Perspective ------------------------------------ 4-5
Staying Ready for Peer Review --------------------------------- 6
Clarifying Changes to Quality Control Policies
and Procedures Documentation --------------------------- 7
Firm Representation Letters ------------------------------------ 7
Summary of A&A Issues and How They Impact
Peer Review -------------------------------------------------- 8-9
On-line MFC Forms ------------------------------------------ 10-11
We Need Peer Reviewers! ------------------------------------ 12
Introducing our Newly Redesigned Website ------------- 13
Reviewed Firm Name Changes ------------------------------- 14
2013 NEPR Roster ----------------------------------------------- 14
So, have you been monitoring your system? Yes, that was one
of the elements. Monitoring is a process that includes an
ongoing consideration and evaluation of the firm's quality
control system in order to determine that the quality control
policies and procedures are properly designed and operating
effectively. Monitoring evaluates whether the firm's guidance
material and practice aids continue to be appropriate, that professional development programs continue to be effective,
and that the firm's policies and procedures are being complied with. Once the firm develops and implements its quality
control system, the system should be monitored to ensure it continues to meet the requirements of a quality control (QC)
system.
QC 10.A66 indicates that monitoring procedures may be accomplished through the performance of three types of
monitoring activities: engagement quality control review (EQCR); review of engagement documentation, reports, and
clients' financial statements for selected engagements after the report release date (sometimes referred to as “postissuance review”); and inspection. SQCS No. 8 clarifies that review of engagement work or the report by engagement team
members prior to the date of the report (pre-issuance review) does not constitute monitoring. Let’s review the three types
of monitoring activities in detail of which firms frequently use more than one of the types.
EQCR
QC 10.38 requires the firm to establish criteria against which all engagements covered by the QC standard are to be
evaluated to determine whether an EQCR should be performed. An EQCR is a process designed to provide an objective
evaluation, before the report is released, of the significant judgments the engagement team made and the conclusions it
reached in formulating the report. The EQCR process is only for those engagements, if any, for which the firm has
determined that an EQCR is required, in accordance with its policies and procedures.
The EQCR serves as an engagement performance QC procedure, and performing an EQCR helps to satisfy the ongoing
evaluation monitoring requirement of SQCS No. 8. An EQCR evaluates the significant judgments made by the engagement
team and the conclusions they reached in formulating the report. The EQCR can provide assurance as to whether reports
issued by the firm are appropriate in the circumstances.
- Continued on Page 2 -
NEPR News
Page 2
sufficient and appropriate experience and authority, in that
they may have a person directly associated with
engagement perform the review. Post-issuance reviews are
performed only for selected engagements as identified by
firm policies. Post-issuance engagement reviews that meet
the above conditions are almost identical to engagement
inspection procedures, except that post-issuance reviews
are assumed to be performed on an ongoing basis, whereas
engagement inspections are generally performed annually
as part of the inspection activity of monitoring.
Evaluation of significant judgments made by the
engagement team as part of the EQCR may provide
validation that the firm's quality control procedures over
differences of opinion and consultation are operating
effectively. The EQCR may highlight that deficiencies exist
and alert the firm where changes are needed. The best part
of an EQCR is identifying problems when the engagement is
not yet complete so issues can be resolved before the
report is issued. This adds to the firm's assurance that the
firm is complying with professional standards and issuing
appropriate reports.
POST-ISSUANCE REVIEW
You will not find the term “post-issuance review” used in
SQCS No. 8, the QC standard describes the procedures that
typically comprise a post-issuance review and describes it to
be one type of monitoring procedure. A post-issuance
review is more involved than an EQCR, which requires
review of only selected engagement documentation relating
to significant findings.
Firms may develop policies and procedures for the use of
post-issuance reviews to be an important part of the firm's
monitoring process. To be effective as a monitoring tool the
procedures are performed by a qualified management-level
individual or a qualified individual under his or her
supervision, the individual performing or supervising the
performance of the post-issuance reviews should not be
directly associated with the performance of the
engagement. Also, the post-issuance review should be
sufficiently comprehensive to enable the firm to assess
compliance with professional standards and applicable legal
and regulatory requirements as well as the firm's control
policies and procedures related to the engagement.
Findings during the post-issuance review may indicate the
need to improve compliance with or change the firm's
quality control policies and procedures. If that is the case
corrective action can be taken. There is an exception for
small firms with a limited number of individuals having
INSPECTION
SQCS No. 8 defines an inspection as “a retrospective
evaluation of the adequacy of the firm's quality control
policies and procedures, its personnel's understanding of
those policies and procedures and the extent of the firm's
compliance with them. Inspection includes a review of
completed engagements.” QC 10.A67 explains that firms
determine the need for and extent of inspection procedures
in part based on the existence and effectiveness of its other
monitoring procedures. The nature of inspection
procedures varies based on the firm's quality control
policies and procedures and the effectiveness and results of
its other monitoring procedures. Inspection procedures can
include both engagement performance-related monitoring
procedures and administrative and other monitoring
procedures.
The inspection process involves selecting individual
engagements, some of which may be chosen without prior
notification. By adding an element of surprise the
monitoring process will be more likely to uncover
engagements with deficiencies, if any, since the
engagement partner will not have an opportunity to review
the engagement documentation prior to the inspection. In
determining the scope of the inspections, the firm may take
into account the scope or conclusions of a peer review or
regulatory inspections. Engagement inspections are often
performed annually or periodically at designated times
during the year, especially in small firms. Since SQCS No. 8
requires at least annual communication to firm leadership
of monitoring results, firms should perform both
engagement and administrative and other monitoring
procedures at least annually. The timing of selection of
individual engagements depends on many factors, including
firm size, number and location of offices, results of past
monitoring, degree of authority the firm has over
inspections, nature and complexity of the firm's practice,
and client and engagement risks. But that is an article for
another time.
- Continued on Page 3 -
NEPR News
Page 3
The Peer Review process is different than monitoring procedures in that
the peer review evaluates a firm's QC system as of a point in time, while
monitoring is an ongoing process. Therefore, the performance of a peer
review does not substitute for monitoring procedures. However, QC
10.A71 indicates that because the objective of a peer review is similar to
that of inspection procedures, a firm's quality control policies and
procedures may provide that a peer review conducted under AICPA
standards may substitute for the inspection of engagement
documentation, reports, and client financial statements for some or all
engagements for the period covered by the peer review.
Active monitoring will ensure your firm meets SQCS and ....... you fill it in,
you know the benefits.
Ronda J. Kilanowski, CPA is a partner in the
firm of Malone, Dirubbo & Company, is a peer
reviewer and serves as a NEPR committee
member.
New Guidance Related to Non-Conforming Engagements
The Peer Review Board recently approved guidance related to responding to engagements that are deemed as not
performed or reported on in conformity with applicable professional standards in all material respects (“nonconforming engagements”). If non-conforming engagements are identified during the peer review, the reviewed firm
has the responsibility to make appropriate considerations about how to remediate the engagement, such as whether
to perform omitted procedures, reissue the accountant or auditors reports, or have previously issued financial
statements revised in accordance with professional standards. The approved guidance emphasizes that the peer
reviewer and the report acceptance body (RAB) should also evaluate whether the firm’s response is appropriate,
whether lack of appropriate response is indicative of other weaknesses in the firm’s system of quality control, or
whether monitoring procedures are necessary to verify if the engagement was remediated.
PRP Section 3100 Supplemental Guidance addresses a reviewed firm’s responsibility to consider applicable
professional standards, and to provide a response, deemed sufficient (genuine, comprehensive, and feasible) by the
reviewer and the RAB, for each non-conforming engagement identified during the peer review:
• The firm should document and provide a written response to the reviewer about the firm’s considerations of
whether or not to perform omitted procedures, reissue accounting or auditing reports, have revisions made to
previously issued financial statements, or remediate a subsequent engagement.
• The firm should thoroughly consider the continued reliance by third party users on reports issued and work
performed. Particularly the firm should consider the expectations of regulatory bodies that the firm will perform
procedures and/or correct reports in a timely manner.
• The firm should include the summary of its considerations and conclusions in its response generally documented
on an MFC form.
• The reviewer should thoroughly evaluate and document their assessment of the firm’s considerations on
documents submitted to the RAB (MFC form additional team/review captain comments, and SRM or
Team/Review Captain’s Checklist).
• The reviewer or AE should not require or instruct the firm to perform omitted procedures, reissue accounting or
auditing reports, to have previously issued financial statements revised and reissued because those are decisions
for the firm and its client to make. However, the administering entity can require the reviewed firms to make
appropriate considerations regarding non-conforming engagements as a condition of acceptance of the peer
review. The firm’s actions may affect other monitoring actions the administering entity’s peer review committee
may impose, including actions to verify that the firm adheres to the intentions indicated in the firm’s response.
This may include requiring a firm to agree to have someone acceptable to the RAB review the engagement
remediation.
• In a System Review, a lack of a firm’s appropriate considerations and response should cause the reviewer to
evaluate whether this is indicative of a potential failure to comply with the leadership/tone at the top element in
the firm’s system of quality control.
NEPR News
Page 4
By Donna Neely, CPA
In the last 10 years, a significant growth area for practices
has been in Employee Retirement Income Security Act
(ERISA) auditing. It has not been without peril as any firm
selected for audit by the Department of Labor (DOL) has
learned. While performing peer reviews and seeing the
many ways firms approach and interpret ERISA auditing,
some common issues and problems come to light.
Below are reminders for firms that are both experienced
and new to the ERISA audit area:
REMINDER 1: UNDERSTAND THE PLAN
Not all plans are the same. Even prototype plans have
customizing features. All too often the auditor doesn't
spend enough time up front understanding the plan
documents. The client may not have the latest version, or
is unable to supply more than a plan summary. Auditors
should start off right by obtaining the correct current
documents, reading them, and placing them in the perm
file. Some notable differences include: the definition of
plan compensation; what to do with bonuses; or how
fringe benefits are treated. The primary key to plan
auditing is to understand both who is covered and the
definition of compensation. Then, have your testing
aligned to that definition for the correct target
participants. It is not unusual to find confusion among plan
sponsors regarding the terms of the plan, especially one
that is complicated or has had many amendments.
REMINDER 2: YOU ARE AUDITING THE PLAN, NOT THE
SPONSOR
Although you may audit the sponsor, auditors often
forget that the plan is a unique entity with its own
policies, procedures, and requirements for compliance
separate from the plan's sponsor. Your audit objectives are
to gain an understanding and document the key controls
and procedures that relate to the plan. Some unique items
to address include: How is the payroll system tailoring itself
to the plan requirements? What controls surround
benefits? How about loans or plan monitoring? More
often than not, there is inadequate demonstration and
documentation of the auditor's knowledge of the plan's
unique systems and procedures.
REMINDER 3: RISK ASSESSMENT MUST HAVE SOME
FOUNDATION
In eight out of ten plans the auditor assesses plan risk as low.
NOOOOOOOOOOOO! Risk assessment is judgmental, but that
doesn't mean making an upfront judgment without a
foundation is OK. Risk assessment can be based upon detailed
control system support testing or careful systems analysis
supported by more limited testing of key control features.
Many times auditors feel just a simple one page narrative or
simple walkthrough is sufficient. It's not! To assess risk as low
you need adequate support. Finally, limited scope doesn't take
away the responsibility for assessing risk at the plan level.
REMINDER 4: UNDERSTAND THE INVESTMENTS
Let's debunk a myth: Not all investments in an Employee
Benefit Plan are mutual funds. There are types of
investments (common collective trusts, pooled separate
accounts, funds in insurance company general accounts, etc.)
that might appear similar to a mutual fund but have
different characteristics and different auditing and disclosure
requirements. It is common to find that the plan sponsor
personnel who are assisting the auditor do not have an
understanding of the type of investments in the plan and
unfortunately the custodian or third-party administrator’s
(TPA) contact person may not know either. You must get a
handle on the type of investments by either web search or
consultation whenever you approach an unfamiliar
investment. Unique disclosure accompanies unique
investments. Most of us seem to be getting a handle on
distinguishing Level One, Two or Three investments but we
often miss the bigger picture as to what the investment is.
- Continued on Page 5 -
NEPR News
Page 5
REMINDER 5: LIMITED SCOPE AUDITS DON'T LET YOU OFF
THE HOOK
Remember, in a limited scope audit, the certification merely
covers the investments and investment transactions. The
certification may or may not extend to Notes Receivable
from participants and it does not cover such audit areas as
participant data and participant accounts, timing of
remittance of contributions, or benefit payments.
REMINDER 6: SSAE 16/SAS 70 REPORTS INCLUDE USER
CONTROL ASSUMPTIONS
The SSAE 16/SAS 70 report is predicated upon the
effectiveness of specified user controls. The auditor must
review and perhaps test the effectiveness of such controls
at the plan level and document that they are in place and
working effectively. The AICPA Employee Benefit Plan Audit
Quality Center (EBPAQC) has a toolkit on its website to assist
in this process. You can't just obtain the report, insert it in
the work papers, and say that you are reducing the
information that is in the report to the assertions that are
significant to the plan's financial statements.
REMINDER 7: TESTING AT THE PARTICIPANT LEVEL IS HARD
With the almost universality of participant directed
accounts, our work is made considerably harder. Most of us
know to adequately test and document that participant
contributions to the plan are authorized; in the correct
amount; and, allocated to the investments selected by the
individual. Sometimes the firm mistakenly thinks this is
covered by the limited scope certification and is not tested.
Testing has been made more difficult in this age of instant
participant directed internet changes. Confirmations
frequently don't work due to a lack of response. One option
is to interview participants while showing them the activity
in their account. An additional difficulty involves the
requirement to test the allocation of plan income to
participants' individual accounts including the realized and
unrealized gains or losses, and plan expenses. Limited scope
does not get you out of this requirement. One additional
key is to review income allocation to individual accounts to
see if any aberration pops out. CAATS assistance (data
mining) can help here.
REMINDER 8: MAKE SURE YOU HAVE ALL THE APPROPRIATE
PARTICIPANTS
The selection of testing that we see is sometimes limited.
New hires, borrowings, and rollovers are sometimes not
included in testing or walkthroughs. Often we see participant
testing that is one-sided. The sample is selected from the
participant account report or the payroll records but not
both. We see very little use of data mining software which
could be used to minimize audit risk.
REMINDER 9: ERISA AUDITING IS HIGH RISK
Some auditors start their employee benefit plan auditing
career when one of their clients has a plan that suddenly
needs an audit and the client asks them to do the audit.
ERISA auditing is a very specialized area. It is very difficult to
do just one or a small number of these audits properly. The
risks are very high for both the client and the auditor if the
audit is not up to standards. The Department of Labor has a
program that selects certain plan filings and examines the
auditors' work papers. If the DOL examiner feels that the
audit did not meet standards, the deficient audit can be
referred to the AICPA and state society. The auditor may face
sanctions, which if severe enough, could result in loss of their
CPA license.
The standards of supporting documentation are rigidly
adhered to by the DOL: if it's not in the work papers, it's not
there. The most common error noted in the peer review is
lack of documentation. The reason is that the auditor knows
the client so well that the brain didn't translate the
information to paper. Don't get caught off-guard. Document,
document, document!
Donna Neely, CPA has extensive experience in auditing
employee benefit plans and conducting peer reviews for ERISA
audits. She is a partner at QRGA, LLP, located in Norwood and
is the co-chairperson for the MSCPA's ERISA Accounting &
Auditing Committee. Donna received her MBA and BSBA from
Boston University. She can be contacted at
dneely@qrgacpa.com.
Reprinted with permission from the Massachusetts
Society of CPAs
NEPR Annual Oversight Report
We publish an Annual Report on Oversight (report) and post the report to our website each November for the prior year.
The purpose of this report is to provide a general overview; statistics and information; and the results of the various
oversight procedures performed by NEPR. The report contains information on:
• Our oversight policies and procedures
• The results of peer reviews
• The number and types of corrective actions
• The number, nature and extent of engagements not performed in accordance with professional standards in all
material respects
View the 2011 report at https://www.nepr.org/sites/default/files/NEPR-2011-Annual-Oversight%20Report.pdf
Page 6
NEPR News
Staying Ready for Peer Review
By Abby T. Dawson, CPA
As the time for the peer review
approaches, firms naturally start
worrying about whether they are
ready to pass the peer review “test”.
As a professional, what is more
important is complying with
professional standards on an ongoing
basis. If you are keeping up and
following standards, “the test” should
be nothing to worry about.
The AICPA and NEPR have many resources to help firms
prepare for peer review. While these resources are valuable
and will be expounded on later in this article, they primarily
serve to help you prepare for “the test” (your peer review).
A course developed by the AICPA, “Upcoming peer Review: Is
your Firm Ready?” available live or online, is also sponsored
by some of the state societies. It is not only designed to help
you prepare for the test, but also to provide guidance on
creating, maintaining, and documenting a quality control
system. Common engagement deficiencies are also
discussed. However, since the course is designed to cover
all key areas, firms that have engagement reviews may find
some of the information unrelated to their practice. Smaller
firms should at least review the AICPA and NEPR website for
publications and articles more specific to their practices.
The big question for many small firms is how to keep up with
standards specific to its practice and still find time to run the
practice. Here are a few suggestions:
Subscribe to, maintain, and follow 3rd party practice aids.
Peer reviewers find many firm’s used outdated checklists and
samples, even though the current version is available. Firm’s
need to find a method that works for them of ensuring the
most recent guidance is followed. Deficiencies also often
arise by not understanding the purpose of a practice aid, or
using one not tailored to the industry or size of the
engagement. There is a wealth of guidance included with
these aids and the explanatory text is usually referenced in
the aids. Updates often have a section emphasizing what’s
new. Some series come with CPE, for a modest price which
covers updates to the standards as well as how to utilize the
service. You should investigate whether there may be a
practice aid specific to the industry you are serving.
Obtaining continuing professional
education specific to your practice
needs is imperative. Options today
are varied. In addition to live
classes, self-study courses are
available from a variety of vendors
in a variety of mediums – books,
online, CDs, DVDs, webinars and in 1
hour to 20 increments. While a
general accounting and auditing
update is always recommended, the focus of them can be
on areas not relevant to your practice. If you don’t perform
audits a course on SSARS updates may be more useful.
Courses tailored to the industries you serve may be
available.
Look into reference material to supplement your third party
practice aids. A few publishers issue practical GAAP and
GAAS guidance updated annually. The AICPA issues industry
audit guides. All official pronouncements are available
online. The AICPA continues to maintain their technical
hotline. On the AICPA website (www.aicpa.org), go to the
research tab, then drop down to AICPA Technical Hotline for
more information. The phone number is 877-242-7212.
The internet has opened up a vast source of information. If
your inbox isn’t already flooded with newsletters you might
find valuable, a search can probably find you links to some
that might be helpful. These resources can help you stay
informed on changes to standards as well as provide tips for
complying with current ones. You may want to confer with
colleagues as to sites they find useful. Your peer reviewer
may also be able to provide practical guidance on such
sources.
In summary, the best way to be ready for your peer review
is to find ways that work for you to stay informed. While,
none of the above tactics guarantees you will obtain and
apply the required knowledge, perhaps they will help you
focus your efforts. Maintaining a professional practice
requires staying current, the peer review is just “the test”.
Abby T. Dawson, CPA is a partner in the firm of F.G. Briggs
Jr., CPA, PA, is a peer reviewer and has been a NEPR
technical reviewer since 1993.
Page 7
3
NEPR News
Clarifying Changes to Quality Control
Policies and Procedures Documentation
The Peer Review Board (Board) has recently approved clarifying changes to guidance for requesting a firm’s quality control
document or responses to Quality Control Policies and Procedures Documentation Questionnaires.
The clarifications affect PRP Section 4300 and 4400 Quality Control Policies and Procedures Documentation Questionnaires for
a “Sole Practitioner with No Personnel”, and for “Firms With Two or More Personnel”, respectively, and PRP Section 4100
Instructions to Firms Having a System Review. The clarifications can be found as the September 27, 2013 Board Open Session
Agenda Item 1.2B-2 and will be included in the 2014 Peer Review Program Manual. The guidance is effective upon issuance of
the manual. A summary of the clarifications are as follows:
• Firms have previously been expected to provide a copy of their quality control document to their team captain. The
changes specify that the document supplied must reflect the policies and procedures effective for the entire peer
review year.
• Team captains have previously been permitted to request that a firm complete the applicable quality control
questionnaire even if the firm has a quality control document. The changes clarify that the firm should still provide a
copy of their quality control document to their team captain. The changes also provide some examples as to why
completion of the questionnaire would still be requested by the team captain when quality control documentation
has been provided.
• Firms without quality control documents have been able to complete the applicable Quality Control Policies and
Procedures Questionnaire as the primary documentation of their system of quality control (to assist them in
complying with the documentation requirements of SQSC No. 8). If the questionnaire completed for the peer review
was not in effect for the peer review year, the changes indicate the firm should also attach previously completed
questionnaire(s) that were effective for the peer review year (which could be the questionnaire completed for the
firm’s last peer review).
• The changes ensure that team captains focus first on whether a firm has a quality control document effective for the
peer review year, and whether the applicable quality control questionnaire needs to be completed to supplement that
quality control document. The changes next ensure that if the firm does not have a quality control document, that it
provide the applicable completed quality control questionnaire effective for the peer review year.
• Team captains should refer to “Monitoring and Documentation of a Firm’s System of Quality Control” within 3100
Supplemental Guidance to determine the impact on a peer review when there is marginal or a lack of documentation
of a firm’s system of quality control as required by the SQCS.
Firm Representation Letters
We have found numerous instances of outdated language and incorrect dating in Firm
Representation Letters. Please be sure to review Section 1000, Appendix B of the
Standards for Performing and Reporting on Peer Reviews prior to submitting the letter
to your reviewer. Appendix B can be found on the AICPA website or on our website at
http://www.nepr.org/resources/scheduling
On System Reviews, the written representations should be addressed to the team captain. Since the team
captain is concerned with events occurring during the peer review period and through the date of his or her
peer review report that may require an adjustment to the report or other peer review documents, the
representations should be dated the same date as the peer review report.
On Engagement Reviews, the representations should be addressed to the review captain (for example, “To
John Smith, CPA”) and dated the same date that the firm submits the list of engagements to the reviewer.
Page 8
NEPR News
Summary of A & A Issues
Facing CPAs and How They
Impact Peer Review
By Leo R. Moretti, CPA & Paul E. Moran, CPA
There are many issues that have surfaced recently that
require special consideration. Some of those issues that we
face that we would like to bring to your attention are as
follows:
• Variable interest entities (VIEs)
• Subsequent events
• Related party transactions
• Fair value measurements
• Supplementary information
Let’s review these items in order.
Variable interest entities (VIEs)
You can find the criteria for VIE's listed in FASB ASC 810-1025 under the VIE section starting at paragraph 20. If the
entity is the primary beneficiary of a VIE that meets the
requirements for consolidation, but is not consolidated and
the VIE is material it would give rise to an adverse opinion
and require an emphasis of matter paragraph describing the
GAAP departure along with the effects of this departure on
the financial statements. As you can see if this was missed
the financial statements would not be in accordance with
GAAP and would result in a MFC and depending on the
pervasiveness of this finding could result in a peer review
report of pass with deficiencies or fail.
Subsequent events
You can find information on subsequent events at FASB ASC
855. There are two types; type 1 would be recorded in the
financial statements, type 2 would be disclosed. Make sure
you review this area to insure proper reporting of
subsequent events to insure that the financials are
presented in accordance with GAAP. Failure to do so may
result in a peer review report of pass with deficiencies or fail.
Related party transactions
The method of recording transactions between related
parties is not specifically addressed by the FASB.
It is a common acceptable practice to record them at
historical cost since the transaction is not considered an
arm's length transaction. Recording gains on related party
transactions would not be appropriate. Often times there
are different treatments for tax purposes giving rise to
deferred taxes. Missing deferred taxes, recording related
party transaction with gains, or recording at fair market
value as opposed to historical cost most likely would be
significant enough to result in a peer review report of pass
with deficiencies or fail.
Fair value measurements
With regards to fair value measurements, nonpublic entities
are exempted from certain disclosure requirements in
paragraphs 10-19 of FASB ASC 825-10-50. The significant
change from ASU 2013-13 is that a nonpublic entity is not
required to provide the disclosure in paragraph 825-10-5010(d) that requires the disclosure of the level of the fair
value hierarchy within which fair value measurements are
categorized for items disclosed at fair value but not
measured at fair value in the statement of financial position.
This is effective immediately; however this does not change
any other fair value disclosure requirements of FASB ASC
820 or 825. Improper interpretation of this area could result
in missed disclosure requirements and the issuance of an
MFC, which could move this deficiency to an FFC or the
report as a pass with deficiency.
Supplementary information
Often third party users of the financial statements request
certain financial information be presented in the form of
supplementary information that may not be in accordance
with GAAP. This information is presented for purposes of
additional analysis and is not a required part of the financial
statements. You will need to find the appropriate opinion
wording. This is not covered in AU-C section 700 as that
section only covers your "standard" report wording. AU-C
section 725 provides samples language when you are asked
to report on supplementary information. If a regulatory basis
of accounting requires presentation of budgetary
information, follow guidance in AU-C section 800. Keep in
mind you are allowed to compile, examine, or apply agreed
upon procedures to prospective financial information as a
separate engagement. Failure to follow the professional
requirements would in most cases result in a peer review
report of pass with deficiencies or fail.
- Continued on Page 9 -
NEPR News
Page 9
New Challenges / New Developments
The AICPA has proposed Financial Reporting framework for small to medium sized enterprises. (FRFSME) and has
published "Financial Reporting Framework for Small and Medium-sized Entities. The AICPA also has available
illustrative financial statements prepared using the Framework along with frequently asked questions, comparisons to
other bases of accounting and decision tool for adopting the Framework. FRF-SME is designed to emphasize familiar
accounting concepts such as historical cost and the matching of revenues with costs. Current accounting standards
have moved away from historical costs and more to fair value. The goal of FRF-SME is to move to a simpler historical
cost framework.
This simpler financial reporting option is designed to meet the users' needs without being unnecessarily costly for
small businesses. Lenders and other uses of SME financial statements largely find fair value measurements in the
financial statements of little use. The FRF-SME does not require an assessment of goodwill impairment but rather
requires goodwill to be amortized over the same period as that used for federal income tax purposes or if not
amortized for federal purposes 10 years. The proposed Framework for SME's will not require consolidation of VIEs.
Under the Framework accounting for leases will follow a traditional accounting approach that is closely aligned with
how leases are treated for income tax purposes. The Framework does not require the reporting of comprehensive
income and will provide for simplified pension disclosures with more principles-based accounting instead of detailed
rules. The Framework should prove to be a cost effective alternative to GAAP by keeping compliance issues and
requirements to a minimum while still satisfying the users' of the financial statements.
Private Company Council – GAAP Issues Being Addressed (Little GAAP)
The top issues to watch out for are:
• Various intangible assets (other than Goodwill)
• VIEs
• Interest rate swaps
• Uncertain tax position
These first few issues were “low hanging fruit” (which were the easiest to address) the “higher hanging fruit” (the
more difficult issues) will take more time to address. Please stay tuned!!!!!
Other tips
Make sure you use up to date practice aids and that the firm is in full compliance with their use. In addition CPE in your
practice areas and new development areas is a must. Pre-issuance reviews and robust internal inspections should go a
long way to maintaining the quality needed to successfully pass peer review.
The above information presented has been summarized from the AICPA website and/or AICPA conferences.
Leo R. Moretti, CPA, CGMA
Leo R. Moretti is a partner in the
firm of YKSM, Ltd, is a peer
reviewer and has been a committee
member of NEPR since 2000, as well
as a former chairman.
Paul E. Moran, CPA. ADR, PFS, CGMA
Paul E. Moran is a partner in the firm of
YKSM, Ltd, is a peer reviewer and has been a
technical reviewer for NEPR since 1996. Paul
is also one of NEPR’s founding fathers as well
as a former committee member.
NEPR News
Page
Page10
3
Online Matter for Further Consideration (MFC) Form
The AICPA has developed online Matter for Further Consideration (MFC) and Disposition of Matter for Further
Consideration (DMFC) forms and has been testing their functionality since the fall of 2012. Peer reviewers are required to
use the online MFC and DMFC forms for reviews of all AICPA member firms. The online forms will not be used for reviews
of non-AICPA member firms until late 2014.
Using existing username and passwords currently used for logging in to www.aicpa.org and for example, purchasing CPE
from CPA2BIZ, both reviewed firms and reviewers will have access the Peer Review Information System Manager (PRISM)
after logging into www.aicpa.org. PRISM has been used by AICPA peer review staff and Administering Entities to perform
the administrative tasks associated with all peer reviews for member and non-member firms since 2009.
Scheduling forms are completed prior to scheduling your review. The form requests the names of your firm’s managing
partner and peer review contact (or identifies you as a sole practitioner). Each of these individuals will be authorized to act
as your firm representative for purposes of completing the online MFC form(s). Prior to signing the MFC form(s), the
reviewed firm representative should discuss the MFC with the appropriate individuals within the firm, including those
charged with governance.
To prevent potential delays during your firm’s peer review, your managing partner and peer review contact should register
on www.aicpa.org and obtain a username and password. We recommend you have a username and password prior to
your review. It will be helpful for you to familiarize yourself with the PRISM system and tailor your homepage to include
information you access often. The website can be accessed from any computer or tablet with an internet connection with
your username and password.
We have developed this quick step-by-step article to assist you with accessing PRISM and completing MFC forms. For
further details, please visit the AICPA website link at:
http://www.aicpa.org/InterestAreas/PeerReview/Community/PeerReviewers/Pages/matters-for-further-considerationproject.aspx
Accessing PRISM
If you already have an AICPA.org login and meet the following qualifications, log into AICPA.org and skip to Signing into
PRISM. To access PRISM you must meet the following requirements:
• Be an active member
• Be employed in a public accounting firm
• Have a login for AICPA.org
If you are not an active AICPA member or are not employed by a public accounting firm and attempt to access PRISM, you
will receive an error message. Please call the AICPA’s Member Service Center at 1.888.777.7077 or email
service@aicpa.org for further assistance with these matters.
Creating a Login and Registering on AICPA.org
If you are an AICPA member in public accounting, follow the steps below to register on AICPA.org.
1. Go to AICPA.org.
2. Click ‘Sign In’.
3. Under the Password field, click ‘Register’.
4. Enter your last name and member number or email and click ‘Search’.
5. Complete the sign-in information and click ‘Submit’.
Note: Please use your primary email address as your username.
6. Wait for the Congratulations message and then sign in.
Note: It can take up to 24 hours after your account is created to be able to sign into PRISM.
-Continued on Page 11-
NEPR News
Page 11
Signing into PRISM
To sign into PRISM, follow the steps below.
1. Go to AICPA.org and at the top of the page, click ‘Sign In’.
2. Enter your AICPA.org username and password and click ‘Sign In’.
3. Hover over the Interest Areas tab and click ‘Peer Review’.
4. Click ‘For CPA Firms’.
5. Click the PRISM link found under ‘For Enrolled Firms’.
After your peer reviewer creates MFC form(s), they will route them to you via PRISM. Your firm representatives will
receive an email from NEPR’s email address stating that MFC form(s) are waiting for review. It will also be shown on your
firm representatives‟ dashboard in PRISM. If there was an email transmission failure, your reviewer will be notified.
After receiving the email you will log in to PRISM, where there will be a link on your homepage for MFC Forms (link to
PRISM). Here are the steps you will take:
1. Click on MFC Forms.
2. Click on the No. of MFCs. This will take you to the MFC Dashboard.
3. Open an MFC by clicking on the MFC No. You can read the form to see which engagements it applies to, the
professional standards references, etc.
4. You must respond to the “To Be Completed by the Reviewed Firm Section.” Indicate whether you agree and if you
discussed it with the applicable individuals in your firm. You have to provide comments however; the extent of
the comments is at the discretion of the firm.
5. Click Sign Off which will return you to the previous screen.
6. Repeat with all of the MFCs. When you are finished and back at the main MFC Dashboard, you can print all of the
MFCs to share with partners, etc.
7. Check the box next to all of the MFCs and click Submit Selected MFCs to Peer Reviewer.
Alternatively, if you don’t agree and would like me to make a revision, instead of steps 4-7 above, please click “Request
Revision for Selected MFCs” on the MFC Dashboard and fill in the appropriate information.
Online MFC Form Support
If you have reviewed the detailed instructions, Q&A and troubleshooting and still have questions, contact the below AICPA
resources.
• For login and access issues: call 888.777.7077 or email service@aicpa.org
• For questions about the online MFC form: call 919.402.4502 or email prsupport@aicpa.org
NEPR News
Page 12
Why would I want to be a peer reviewer?
As a peer reviewer, you will not only contribute to the improvement of quality and
standards for your profession, but also receive many additional benefits including:
• The development of an additional profit center for your firm.
• The potential for referrals for additional services.
• Recognition as an expert in your field among your peers.
• Identification of best industry practices which can be applied at your firm.
• An opportunity to sharpen your own skills and reinforce your accounting and auditing
knowledge.
Why is now a good time to become a peer reviewer?
As the early “pioneers” of peer reviewers begin to retire, the pool of qualified peer reviewers has been steadily shrinking,
creating a demand in this important professional program. In addition, the AICPA has also recently made it easier to
receive the training you need to become a peer reviewer, with more options to choose from.
Could you expand on some the benefits of being a peer reviewer?
Being a peer reviewer opens doors to networking opportunities. Peer review services will enhance your knowledge of
professional standards. In addition, your work as a peer reviewer will enable you to provide better service to your own
clients by offering a venue to observe and understand the best techniques of other accounting firms.
When you become a peer reviewer, you will gain valuable knowledge, expertise and exposure and earn the respect of
your peers. Performing peer reviews also provides members with a way to “give back to the profession.”
What are the requirements for becoming a peer reviewer?
To become a team captain on system reviews or a peer reviewer on engagement reviews, an AICPA member must:
1. Meet all of the reviewer requirements (http://www.aicpa.org/InterestAreas/PeerReview/Community/Pages/PeerReviewer.aspx)
2. Complete the introductory reviewer training as discussed below.
3. Complete the online reviewer resume form through PRISM.
What are the introductory training options?
In an effort to increase the accessibility of peer reviewer training the AICPA has introduced the restructuring of the
educational options:
• “How To” Course in self-study format – This course will qualify for approximately 8 credit hours of CPE and can be
taken in lieu of attending Day 1 of the live seminar “How To” Course.
• Competency Test – This test does not provide CPE but it can be taken in lieu of attending Day 1 of the live seminar
“How To” Course.
New reviewers can meet the initial peer reviewer education requirements by completing one “theory” option and one
“practical application” option. This is highlighted in the matrix that follows:
Theory
Practical Application
"How To" live seminar - Day 1
"How To" live seminar - Day 2
"How To" self-study
Competency test
Mentoring by a Peer Review Mentor
For example, a potential reviewer can meet the initial training requirements by taking the two day “How To” Course in live
seminar format. Alternatively, they could take the “How To” self-study course and then be mentored by an approved Peer
Review Mentor.
Still interested? Give us a call to discuss further!
NEPRNews
News
NEPR
NEPR
News
NEPR News
On-site Oversight of NEPR
Page
Page
88
Page13
Page 4
NEPR is visited by a member of the AICPA Peer Review Board (PRB) Oversight Task Force (OTF) every other year. During
these visits, the member of the OTF will at a minimum:
• Interview the administrative staff and Committee Chair
• Evaluate the various policies and procedures for administering the AICPA PRP Meet with NEPR’s peer review
committee during its consideration of peer review documents.
• Evaluate a sample of peer review documents and applicable working papers on a post acceptance basis.
Our latest oversight visit was performed in November, 2012 and resulted in the equivalent of a “pass” report, with the
conclusion that NEPR has complied with the administrative procedures and standards in all material respects”.
View the full report, as well as all other administering entities’ reports at
http://www.aicpa.org/InterestAreas/PeerReview/Resources/Transparency/Oversight/Pages/OversightVisitResults.aspx
Introducing the Newly Redesigned NEPR Website!
We have redesigned our website to be even easier to navigate to the information that you need quickly, while
providing more resources than ever to help our firms prepare for a peer review.
Visit us at www.nepr.org
Lots of ways to
contact us
including an
‘Email Us’ form at
the bottom of
every page
A dedicated
section for peer
review related
documents & links
Quick links to
the most popular
web pages
A section on the
home page to
keep you updated
on the latest peer
review news
Page
14
Pag10
Page
Page
10
Page
76
NEPR
News
NEPR
News
NEPR
News
NEPR
News
NEPR
News
NEPR
News
Reviewed Firm Name Changes
A reviewed firm may change its name during the peer review year or after the peer review year-end but prior to the peer
review report being presented for acceptance to the peer review committee. A firm should complete the Notification of
Change in Firm Structure Form (www.nepr.org/sites/default/files/PRP_change_form.pdf) whenever there is merger,
dissolution, or just a name change and should submit this information to NEPR. The AICPA will make a determination whether
for peer review purposes it will be treated as solely a name change. If the firm’s name changed due to a merger, or
acquisition, dissolution, or sale, this guidance may not be applicable.
The peer reviewer is issuing a report on a period covering one year and should include the name that appeared on the
letterhead of the reports issued by the firm during that year.
If subsequent to the peer review year-end the firm changed its name, the new name may appear as well. For example, ABC
firm had a peer review for the year ended 9/30/13 and changed its name to ABCDE firm effective 11/1/13. The peer review
took place on 12/1/13, and the peer review report was issued 12/15/13. In this example the report could be addressed to (and
all references in the report) could refer to “ABCDE firm (formerly known as ABC firm”).
If the firm underwent a name change in the middle of the peer review year, the report should be addressed to the firm’s most
current name and could also indicate in the body of the report, “also doing business as.” So in the previous example, assume
ABC firm changed its name to ABCDE firm on 3/31/13. The peer review report would appropriately be addressed to ABCDE
firm but the body of the report could refer to ABCDE firm “also doing business as ABC firm” during the peer review year since
reports were issued on both letterheads for the reports issued by the firm. Find the full guidance in Section 3100 of the Peer
Review Program Manual.
2013 NEPR Roster
New England
Peer Review
1750 Elm St, Ste 403A
Manchester, NH 03104
Phone:
603.623.3513
Fax:
603.645.9877
E-Mail:
pamela@nepr.org
NEPR Meeting
Schedule
November 15, 2013
January 17, 2014
May 16, 2014
September 5, 2014
(Dates are subject to change
– check the NEPR website for
any revised dates)
Maine
Rhode Island
Technical Reviewers
Leo R. Moretti (*2014)
YKSM, Ltd.
56 Wells Street
Westerly, RI 02891
(401) 596-9500
(401) 348-9908 – Fax
lmoretti@yksmcpa.com
Abby T. Dawson
F. G. Briggs, Jr., CPA, PA
98 Salmon Street
Manchester, NH03101
(603) 668-1340
(603) 668-6751 – Fax
abby@fgbriggsjrcpa.com
Wayne C. Smith (*2015)
Smith & Associates, CPAs
500 US Route One, Suite 203
Yarmouth, ME 04096
(207) 846-8881
(207) 846-8882 – Fax
wayne@smithassociatescpa.com
Vermont
Barbara McGuire
Chester M. Kearney
PO Box 744
Houlton, Maine 04730
(207) 532-4271
(207) 532-4589 - FAX
barbara@cmkcpa.com
New Hampshire
Treasurer
Paul E. Moran
YKSM, Ltd.
27 Dryden Lane
Providence, RI 02904
(401) 273-1800
(401) 331-0946 – Fax
pmoran@yksmcpa.com
Herman Belanger (*2014)
Chester M. Kearney, PA
PO Box 1550
Presque Isle, Me 04769
(207) 764-3171
(207) 764-6362 – Fax
herman@cmkcpa.com
Ronda J. Kilanowski (*2014)
Malone, Dirubbo & Co., PC
9 West Street
Lincoln, NH 03251
(603) 934-2942
(603) 934-5384 - Fax
rjk@mdccpas.com
Clerk
Robert L. Vachon (*2016)
Vachon, Clukay & Company PC
608 Chestnut Street, FL 2
Manchester, NH 03104
(603) 622-7070
(603) 622-1452 – Fax
rvachon@vachonclukay.com
David C. Grippin (*2015)
Grippin Donlan Pinkham
3 Baldwin Avenue
S. Burlington, VT 05403-7317
(802) 846-2000
(802) 846-2001 – Fax
dgrippin@gdp-cpa.com
Michael L. Segale, CPA (*2016)
Fothergill, Segale & Valley, PC
143 Barre Street
Montpelier, VT 05602
(802) 223-6261
(802) 223-1550 – Fax
mike@fsv-cpa.com
Executive Director
Pamela M. Lemire
pamela@nepr.org
Recording Secretary
Chairman/President
* Denotes year in which term expires
Charles A. Prigge
Oster & Wheeler PC
PO Box 623
Keene, NH 03431
(603) 352-4500
(603) 352-8558 - FAX
cprigge@ostercpa.us.com
Download